tree 6ad3c568371acfc18e96883644f76ecdedd34d07
parent 4d48bb360db5148b18524d06616555b06342fa68
author Renato Westphal <renato@opensourcerouting.org> 1480358833 -0200
committer Paul Jakma <paul@quagga.net> 1485197517 +0000

bgpd: fix invalid memory access in peer_free()

We shoult not call bgp_unlock() before calling
bgp_delete_connected_nexthop() in the peer_free() function. Otherwise,
if bgp->lock reaches zero, bgp_free() is called and peer->bgp becomes
an invalid pointer in the bgp_delete_connected_nexthop() function.

To fix this, move the call to bgp_unlock() to the end of peer_free().